Skip to content
OpenAdvisories
Medium · 6.5 CVE-2018-8912 EUVD-2018-20520GHSA-rq3f-8v2f-4ph9

Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows remote authenticated us…

Published May 9, 2018 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Note Station

Description

Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows remote authenticated users to inject arbitrary web script or HTML via the commit_msg parameter.

Affected products

VendorProductAffectedFixed
Synology Note Station unspecified – < 2.5.1-0844 2.5.1-0844

References